Privacy Policy

01

Accountability

• Driving Zone Driving School is the data controller for any personal information you share with us through this website, the registration form, in-vehicle lessons, or our administrative records. We are responsible for the personal information under our control and have designated the school owner as accountable for our compliance with this policy.
• Questions or requests about your data can be sent to us via the contact channels listed on our Contact page.

02

Why we collect personal information

• We collect personal information to register you for driving lessons, deliver the courses you’ve booked, schedule in-vehicle sessions, process payments, issue completion certificates, communicate with you about your progress, and meet our recordkeeping obligations under Alberta Transportation guidelines.
• We do not collect personal information for any purpose other than those identified to you at the time of collection.

03

Consent

• Your consent is required for the collection, use, and disclosure of your personal information. By submitting the registration form — including the explicit acknowledgement of our Terms and Cancellation, Refund & Rescheduling Policy — you consent to our handling of the data you provide for the purposes described in this policy.
• You may withdraw consent at any time by contacting us, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to deliver the lessons or services you’ve booked.

04

What we collect

• During registration we typically collect: your name, date of birth, contact details (phone, email, address), Alberta Learner’s or driver’s licence number and expiry, parent or guardian information when the student is a minor, the course you’ve selected, your weekly availability, payment metadata returned by our payment processor, and any special conditions you choose to share with us.
• We do not collect data we don’t need. Payment card numbers, CVVs, and bank credentials are entered directly into our payment processor and never touch our servers.

05

How we use and share your information

• We use your information internally to deliver lessons, schedule sessions, communicate with you, and maintain school records. We share information only with the third-party service providers listed below — each of whom is contractually required to handle your data with the same level of care described in this policy:
• — Stripe (payments) — processes lesson payments and stores card data on our behalf. https://stripe.com/privacy
• — Resend (transactional email) — delivers booking confirmations and admin notifications. https://resend.com/legal/privacy-policy
• — Neon (database hosting) — stores your registration record and lesson history. https://neon.tech/privacy-policy
• — Google Maps (location embed) — renders the school’s location on the Contact page. https://policies.google.com/privacy
• We do not sell your personal information. We do not share it with advertisers. We will only disclose information to law enforcement, regulators, or insurers when required by Canadian law or to investigate a credible safety concern.

06

How long we keep your information

• In line with our Terms, school records (registration details, lesson reports, certificates) are retained for a minimum of two years from your last lesson, after which they are securely deleted unless a longer retention period is required by law (for example, tax or insurance records).
• You can request that we delete information we are not legally required to keep at any time — see "Your right to access and correct your data" below.

07

Keeping your information accurate

We try to keep the personal information we hold about you accurate and up to date for the purposes for which it is used. If any of your details change — phone number, email, licence expiry, address — please let us know so we can correct our records.

08

How we protect your information

• We protect your information with safeguards appropriate to its sensitivity. Data in transit is encrypted via HTTPS / TLS 1.2+. Administrative access to school records uses authenticated sessions with hashed credentials and short-lived tokens. Physical paperwork is stored in a locked office.
• No system is perfectly secure, but we treat any incident affecting your data with urgency, will notify you promptly, and will work with the appropriate regulators where required.

09

Openness about our practices

This policy is the canonical statement of how we handle your information. We update it when our practices change and bump the "Last updated" stamp at the top of this page. The most recent version always supersedes earlier ones.

10

Your right to access and correct your data

• You have the right to ask us what personal information we hold about you, why we have it, and who it has been shared with. You can also request that we correct inaccurate data or delete information we are not legally required to retain. We will respond to verified requests within thirty days.
• Send your request through the contact channels on our Contact page. We may need to verify your identity before sharing or modifying any records.

11

Challenging our compliance

If you believe we have not handled your information in keeping with this policy or with PIPEDA, please contact us first — most concerns can be resolved directly. If we cannot resolve a complaint to your satisfaction, you can escalate it to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.